need bfd rules

how can i automatically stop this type attacks on server. any one have any custom bfd rules ? this is on just default document root but if this happen on live web how to automatically block them . the cracker change them ip every 10 to 15 min . i need good tool which can block ips in apf .